This post is useful to make necessary configuration changes in Oracle Enterprise Manager to run the applications which are using RightNow adapter.
Here I'm using EM 12c:
1. Adding Permissions
You must grant permissions to access the credentials store. This task only needs to be performed once for any Oracle Weblogic Server domain.
a. Login to Oracle Enterprise Manager
b. Expand "Weblogic Domain"
c. Right click on ofm_domain(the domain name that was configured) then Select "Security" -> "System Policies"
d. From right-part of the window, search for following:
Type: Codebase
Name: Includes: jca
then Click "Search" icon(play button) as shown below:
e. Clik on the row which is having jca*****.jar then click "Edit"
f. Click "Add" button as shown below:
g. On the Add Permission page, click Select here to enter details for a new permission and enter the following details for a new permission:
Permission Class: oracle.security.jps.service.credstore.CredentialAccessPermission
Resource Name: context=SYSTEM,mapName=oracle.wsm.security,keyName=*
Permission Action: *
That's it!!
2. Adding Certificate to Weblogic Server
We have to import security certificate into weblogic where our application will be running. This is required since we are going to connect with Service Cloud which runs on https.
2.1 Downloading certificate
a. Open your web browser and type the following URL, replacing the host_name and interface details.
example: http://integration-test.rightnowdemo.com/cgi-bin/integration_test.cfg/services/soap?wsdl=typed
Where host_name is integration-test.rightnowdemo.com and interface is integration_test
b. Click the lock icon in address bar -> "Connection" tab -> click on "Certificate information".
c. A dialog box "Certificate" appears. Goto "Details" tab -> "Copy to File...". Then "Certificate Export Wizard" will be displayed. Click Next.
d. Select "Base-64 encoded X.509 (.CER)" and click Next.
e. Click "Browse.." and provide file name to store the certificate and then click "Save" -> "Next"
f. Click "Finish" then the certificate will be exported into the selected directory and with the filename.
2.2 Import Certificate into Weblogic Server
a. Login to Oracle Enterprise Manager
b. Expand "Weblogic Domain"
c. Right click on ofm_domain(the domain name that was configured) then Select "Security" -> "Keystore"
d. From the right panel of the window, Expand "system" -> Select "trust" -> click on Manage
e. Screen navigates to "Manage Certificates: system/trust". Then click "Import" and then a dialogue box appears as shown below.
Provide the details as below:
Certificate Type : "Trusted Certificate" :
Alias : IntegrationTestServiceCloud ( can be any name for naming the certificate)
Choose "Select a file that contains the Certificate or Certificate Chain"
File Name: select the imported certificate as in previous step from the file dialogbox
f. Click "OK".
That's it!!
3. Adding credential pair
a. Login to Oracle Enterprise Manager
b. Expand "Weblogic Domain"
c. Right click on ofm_domain(the domain name that was configured) then Select "Security" -> "Credentails"
d. Click on "Create Map"
e. In the dialog, provide Map Name as "oracle.wsm.security" (without quotes) then click "OK". Because, this is the map we have configured in previous step(Adding Permissions) to be accessible by jca.
f. Select the row "oracle.wsm.security" then click on "Create Key" and provide details as below:
Note: Credentials which will be used by RightNow Adapter. The key should be the same while configuring RightNow Adapter wizard in JDeveloper. The deployed application/soa composite will look for this name during runtime.
g. Click OK
That's it!!
Here I'm using EM 12c:
1. Adding Permissions
You must grant permissions to access the credentials store. This task only needs to be performed once for any Oracle Weblogic Server domain.
a. Login to Oracle Enterprise Manager
b. Expand "Weblogic Domain"
c. Right click on ofm_domain(the domain name that was configured) then Select "Security" -> "System Policies"
Type: Codebase
Name: Includes: jca
then Click "Search" icon(play button) as shown below:
e. Clik on the row which is having jca*****.jar then click "Edit"
f. Click "Add" button as shown below:
g. On the Add Permission page, click Select here to enter details for a new permission and enter the following details for a new permission:
Permission Class: oracle.security.jps.service.credstore.CredentialAccessPermission
Resource Name: context=SYSTEM,mapName=oracle.wsm.security,keyName=*
Permission Action: *
That's it!!
2. Adding Certificate to Weblogic Server
We have to import security certificate into weblogic where our application will be running. This is required since we are going to connect with Service Cloud which runs on https.
2.1 Downloading certificate
a. Open your web browser and type the following URL, replacing the host_name and interface details.
example: http://integration-test.rightnowdemo.com/cgi-bin/integration_test.cfg/services/soap?wsdl=typed
Where host_name is integration-test.rightnowdemo.com and interface is integration_test
b. Click the lock icon in address bar -> "Connection" tab -> click on "Certificate information".
c. A dialog box "Certificate" appears. Goto "Details" tab -> "Copy to File...". Then "Certificate Export Wizard" will be displayed. Click Next.
d. Select "Base-64 encoded X.509 (.CER)" and click Next.
e. Click "Browse.." and provide file name to store the certificate and then click "Save" -> "Next"
f. Click "Finish" then the certificate will be exported into the selected directory and with the filename.
2.2 Import Certificate into Weblogic Server
a. Login to Oracle Enterprise Manager
b. Expand "Weblogic Domain"
c. Right click on ofm_domain(the domain name that was configured) then Select "Security" -> "Keystore"
d. From the right panel of the window, Expand "system" -> Select "trust" -> click on Manage
e. Screen navigates to "Manage Certificates: system/trust". Then click "Import" and then a dialogue box appears as shown below.
Provide the details as below:
Certificate Type : "Trusted Certificate" :
Alias : IntegrationTestServiceCloud ( can be any name for naming the certificate)
Choose "Select a file that contains the Certificate or Certificate Chain"
File Name: select the imported certificate as in previous step from the file dialogbox
f. Click "OK".
That's it!!
3. Adding credential pair
a. Login to Oracle Enterprise Manager
b. Expand "Weblogic Domain"
c. Right click on ofm_domain(the domain name that was configured) then Select "Security" -> "Credentails"
e. In the dialog, provide Map Name as "oracle.wsm.security" (without quotes) then click "OK". Because, this is the map we have configured in previous step(Adding Permissions) to be accessible by jca.
f. Select the row "oracle.wsm.security" then click on "Create Key" and provide details as below:
Note: Credentials which will be used by RightNow Adapter. The key should be the same while configuring RightNow Adapter wizard in JDeveloper. The deployed application/soa composite will look for this name during runtime.
g. Click OK
That's it!!














No comments :
Post a Comment